KOTRIC CERTIFICATION CENTER
Privacy Policy
KOTRIC Certification Center Co., Ltd. complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and establishes and discloses this Privacy Policy to ensure that personal information is processed lawfully and securely.
01 Purpose of Processing, Items Collected, and Retention Period
Personal information collected is not used for any purpose other than those listed below. If the purpose changes, we will take the necessary measures in accordance with applicable laws.
| Service | Purpose | Items Collected | Retention Period |
|---|---|---|---|
| Certification Inquiry & Cost Estimate | Certification consultation, contract review, and quotation | Company name, business registration number, contact person's name, phone number, email, address, sites and number of employees, certification scope and standards, inquiry details | 3 years from the date of collection |
| Training Application | Processing applications, scheduling, and conducting training | Applicant's name, organization, department and job title, phone number, email, training course and format, special requests | 3 years from the date of collection |
| Certification Plaque Request | Confirming requests, production, delivery, and billing | Company name, applicant's name, phone number, email, job title, delivery address, certificate information, special requests | 3 years from the date of collection |
| Certified Company Search | Verifying certificate registration status | Company name, certificate number, business registration number | Not stored after the search |
| Website Use | Service security, troubleshooting, and prevention of misuse | IP address, access logs, cookies, and other automatically generated information | Access logs: 6 months from the date of creation Session cookies: deleted when the browser is closed |
02 Provision of Personal Information to Third Parties
As a rule, KOTRIC Certification Center does not provide personal information to third parties. Personal information is provided only with the separate consent of the data subject or where specifically required by law, in accordance with applicable regulations.
03 Outsourcing of Personal Information Processing
When we outsource personal information processing, such as website operation, inquiry email handling, or server and hosting services, we disclose the contractors and the outsourced tasks, and manage and supervise them through contracts to ensure that personal information is processed securely.
04 Overseas Transfer of Personal Information
When we use overseas cloud, analytics, spam prevention, or email services, we will disclose the destination country, the recipient, the items transferred, the purpose, the timing and method of transfer, the retention period, and how to refuse the transfer.
05 Destruction of Personal Information
Personal information is destroyed without delay once the retention period expires or the purpose of processing has been achieved. Electronic files are deleted using methods that prevent recovery, and paper documents are shredded or incinerated. Where retention is required by law, the information is stored separately.
06 Rights of Data Subjects and Legal Representatives and How to Exercise Them
Data subjects may request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw their consent. These rights may be exercised by the data subject or a lawful representative by submitting a request to the Center in writing or by phone, and the Center will take action without delay in accordance with applicable laws.
07 Measures to Ensure the Security of Personal Information
- Minimizing access rights to personal information and reviewing them regularly
- Retaining and reviewing access logs, and encrypting key information such as passwords
- Malware protection, security updates, and access control
- Privacy training for employees and operation of an internal management plan
- Physical safeguards, including access control to areas where documents and media are stored
08 Installation, Operation, and Refusal of Automatic Collection Devices
The website may use cookies to provide services and improve convenience. Users may refuse cookies through their browser settings; however, some services may be limited as a result.
09 Remedies for Infringement of Rights
For consultation or relief regarding personal information infringement, you may contact the Personal Information Infringement Report Center (dial 118 in Korea, no area code required).
10 Changes to This Privacy Policy
If this Privacy Policy is amended, the effective date and details of the changes will be announced on the website, and previous versions will remain available for review.